1. I have installed apache 2.2.22 version for web interface in AIX 7.1 server2. i am using the apache for req routing using re write rule (mod writers)3. in the year of 2008 my collegue compiled the apache with openssl version OpenSSL/0.9.8k4. This version is having security threads and hence the info sec team advised to update he openssl to new version.5. But Now my apache architecture is not using openssl so i have removed the openssl from the server and recomplied the apache with latest verson 2.2.22.

still when a http req hit the server it is showing the banner "Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8k"-------------------------------------------------hulstms> telnet inpartnerdev.u.com 80Trying...Connected to inpartnerdev.u.com.Escape character is '^]'.

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>Connection closed.

Desired Output :-

hulstms> telnet inpartnerdev.u.com 80Trying...Connected to inpartnerdev.u.com.Escape character is '^]'.

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>Connection closed.

only because of this the security team is commenting red in audit.

do u know the location of this banner file where i can manually edit that.

I would look really hard at whether you're actually running the version that you recompiled. It sounds like you are still running the old version to me. Maybe you did not copy the new binaries to the correct location?

AFAICT the ServerSignature and ServerTokens directives control whether the various parts of the banner are generated, but not their contents; the contents are determined by what's actually running. So if it is saying that you are still running OpenSSL/0.9.8k, then OpenSSL/0.9.8k is still compiled in.

Edit: One possibility -- if you built/installed from generic sources, the default installation location may not be where AIX expects!

The years just pass like trains. I wave, but they don't slow down.-- Steven Wilson